Fix errors while running publishSigned

In 54266c1 I upgraded sbt-pgp from
1.1.0 to 2.0.0-M2, this changed the way signing was done: instead of
using the bouncycastle Java library, sbt-pgp now just calls gpg.
Unfortunately, it turns out that multiple parallel calls to gpg can lead
to the gpg-agent running out of memory, causing `publishSigned` to
fail (as happend in https://dotty-ci.epfl.ch/lampepfl/dotty/1487/1/8
while trying to publish Dotty 0.19.0-RC1), therefore we revert back to
using bouncycastle by setting SBT_PGP_USE_GPG=0 as documented in the
README of sbt-pgp.

Author: smarter

project/scripts/sbtPublish

@@ -18,9 +18,15 @@ if [ ! "$NIGHTLYBUILD" = "yes" ] && [ ! "$RELEASEBUILD" = "yes" ]; then
     exit 1
 fi
 
-# Setup gpg
-export GPG_TTY="$(tty)"
-echo "$PGP_SECRET" | gpg --batch --import
+# Setup gpg (disabled, we use bouncycastle instead)
+# export GPG_TTY="$(tty)"
+# echo "$PGP_SECRET" | gpg --batch --import
+
+# Setup bouncycastle instead of gpg to do signing, because gpg explodes when
+# doing too many signing requests in parallel (https://github.com/sbt/sbt-pgp/issues/168)
+export SBT_PGP_USE_GPG=0
+mkdir -p "$HOME/.sbt/gpg"
+echo "$PGP_SECRET" > "$HOME/.sbt/gpg/secring.asc"
 
 # run sbt with the supplied arg
 SBT="$(cd "$(dirname "${BASH_SOURCE[0]}")" >& /dev/null && pwd)/sbt"